known_hosts manages itself. Only put the private key on the server you ssh FROM, no need to put the private key on the remote server you SSH to. Limit the number of computers to the minimum (usually only 1).